Account creation is the first place a platform reveals its character. A regulated platform asks the date of birth at sign-up, refuses registration to anyone under the legal age, and limits registration to jurisdictions where the operator holds a licence. A platform that does not require an explicit adult confirmation at sign-up is asking the player to take the marketing copy on trust. The honest reading is that the trust is not earned.
Two-factor authentication is the smallest ask of a modern platform. The cleanest platforms offer it as an option at sign-up; the next best offer it in account settings. A platform that hides two-factor behind a customer-service call is asking the player to do extra work to secure an account that the platform is responsible for keeping.

